Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-20058

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripti

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Unified Contact Center Enterprise

  • N/Aaffected

Cisco Cisco Unified Contact Center Express

  • 11.0(1)SU1affected
  • 12.0(1)affected
  • 12.5(1)affected
  • 12.5(1)SU1affected
  • 12.5(1)SU2affected
  • 11.6(1)affected
  • 11.6(2)affected

Cisco Cisco Unified Intelligence Center

  • 11.0(1)affected
  • 11.5(1)affected
  • 11.6(1)affected
  • 12.0(1)affected
  • 12.5(1)affected
  • 12.5(1)SUaffected
  • 12.6(1)affected

Cisco Cisco Packaged Contact Center Enterprise

  • 11.6(1)affected
  • 11.6(2)affected
  • 12.0(1)affected
  • 12.5(1)affected
  • 12.5(2)affected
  • 12.6(1)affected

References